Nagios XI Force HTTPS

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
jkinning
Posts: 747
Joined: Wed Oct 09, 2013 2:54 pm

Nagios XI Force HTTPS

Post by jkinning »

I had our Internal Security Team ask if I can change our Nagios XI interface to force the use of HTTPS. I found a thread dated for last year about changing the /usr/local/nagiosxi/html/config.inc.php to $cfg['use_https']=true; and under Admin->Manage System Config and change Program URL to https://nagiosurl

I did both of these but it doesn't appear to be working. If I generate an internal certificate from our CA where do I need to place the certificate or can I just generate one from the Nagios XI server? What other settings do I need to change in order to use HTTPS instead of HTTP?
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Nagios XI Force HTTPS

Post by tmcdonald »

Did you read through this document?

https://assets.nagios.com/downloads/nag ... s%20XI.pdf
Former Nagios employee
jkinning
Posts: 747
Joined: Wed Oct 09, 2013 2:54 pm

Re: Nagios XI Force HTTPS

Post by jkinning »

No, but I did now and it appears to be working.

BUT I am getting alerts from my Nagios XI showing -

Code: Select all

 Error: Could not parse XML from http://<IP address of Nagios XI server>/nagiosxi ()
This is for Nagios XI Jobs is CRITICAL and Nagios XI Daemons is CRITICAL
jkinning
Posts: 747
Joined: Wed Oct 09, 2013 2:54 pm

Re: Nagios XI Force HTTPS

Post by jkinning »

Could someone move this over to the Customer Support -> Nagios XI support board? I don't see where or even if I can do so.
jolson
Attack Rabbit
Posts: 2560
Joined: Thu Feb 12, 2015 12:40 pm

Re: Nagios XI Force HTTPS

Post by jolson »

I moved your post.

It sounds like when you ran the Nagios XI monitoring wizard, you used the 'http' address of the Nagios XI server. I recommend re-running the wizard using the new HTTPS address:
2015-07-15 12_59_52-Nagios XI - Configuration - Firefox Developer Edition.png
You do not have the required permissions to view the files attached to this post.
Twits Blog
Show me a man who lives alone and has a perpetually clean kitchen, and 8 times out of 9 I'll show you a man with detestable spiritual qualities.
jkinning
Posts: 747
Joined: Wed Oct 09, 2013 2:54 pm

Re: Nagios XI Force HTTPS

Post by jkinning »

This is from the Nagios XI server itself not a remote Nagios XI instance. I do see where it has to do with http since I changed over to https but I don't see any hosts or service checks in CCM for this actual server. When I installed Nagios XI it must have setup checks for itself but I don't see them anywhere. I followed these steps https://assets.nagios.com/downloads/nag ... s%20XI.pdf
jkinning
Posts: 747
Joined: Wed Oct 09, 2013 2:54 pm

Re: Nagios XI Force HTTPS

Post by jkinning »

Thanks I got it. Everything is looking good with the https. You can close this out.

It was a remote XI checking my production instance. Duh! :oops:
jolson
Attack Rabbit
Posts: 2560
Joined: Thu Feb 12, 2015 12:40 pm

Re: Nagios XI Force HTTPS

Post by jolson »

No problem! I'll lock this thread and mark it as resolved. Thanks!
Twits Blog
Show me a man who lives alone and has a perpetually clean kitchen, and 8 times out of 9 I'll show you a man with detestable spiritual qualities.
Locked